Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wakK-x0Tup0YtZZVCyXlbg7gZ3A.roa
File: wakK-x0Tup0YtZZVCyXlbg7gZ3A.roa (raw, json)
Hash identifier: 3wXJS/emH4tpcVac1NtYvvlUJYlSQM6Nwef6Ca4UPmQ=
Subject key identifier: C1:A9:0A:FB:1D:13:BA:9D:18:B5:96:55:0B:25:E5:6E:0E:E0:67:70
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019364B69F165523B26DAE50B8DF5DA5AB2E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wakK-x0Tup0YtZZVCyXlbg7gZ3A.roa
Signing time: Mon 25 Nov 2024 19:05:10 +0000
ROA not before: Mon 25 Nov 2024 19:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:64b5:befe/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:b6:9f:16:55:23:b2:6d:ae:50:b8:df:5d:a5:ab:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 25 19:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1a90afb1d13ba9d18b596550b25e56e0ee06770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:93:1f:b2:bd:65:0a:1a:62:fa:59:10:a8:
36:53:b9:83:9c:81:50:38:f9:4b:38:da:29:13:bd:
cc:3a:e0:7b:1b:cb:d4:b3:65:09:d5:1b:a8:ea:db:
ec:f9:5b:de:8c:27:44:d9:08:8a:3f:48:05:94:41:
fc:5b:e0:32:d5:85:7f:4d:13:5a:93:4d:dd:b0:3b:
9f:e0:54:90:83:57:dc:8b:0d:35:da:0f:8a:51:17:
6a:14:c1:0c:02:5e:ca:4a:36:3b:12:e7:2f:2b:45:
8a:d4:3d:1a:c0:a0:13:18:f5:a6:b2:b6:bc:0b:cb:
6e:2f:57:fc:3b:e0:40:63:7c:f8:98:74:61:5b:b5:
61:76:15:67:27:28:e0:0f:a2:07:a6:b3:90:e3:9a:
39:d5:8d:22:4c:f7:39:a2:a4:c2:2f:e5:72:88:b2:
30:d6:4e:db:fc:b4:12:34:87:e9:df:bc:86:19:e5:
98:ea:50:c6:57:6b:91:fb:7a:9b:bb:59:b1:ff:d3:
fb:35:d1:66:05:84:48:8b:cc:1f:0e:9f:83:0b:8f:
ac:e3:b4:a0:58:cb:f0:07:6b:77:b4:54:cc:4e:b1:
b7:fb:5b:90:1c:d9:a5:4f:fb:69:b1:0f:f4:03:21:
41:22:59:80:e8:f9:a6:09:d9:a4:f9:46:0f:4e:1e:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A9:0A:FB:1D:13:BA:9D:18:B5:96:55:0B:25:E5:6E:0E:E0:67:70
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wakK-x0Tup0YtZZVCyXlbg7gZ3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:64b5:befe/128
Signature Algorithm: sha256WithRSAEncryption
31:8d:bb:65:80:0c:0d:bf:5a:33:7e:b6:1d:c0:01:b0:54:03:
00:b8:dc:22:35:6d:05:b1:27:ce:e9:f0:99:7b:53:9c:cf:77:
b4:b3:fa:56:8b:39:a4:d6:93:8f:2f:a2:f1:44:c6:32:80:93:
da:9b:c1:16:9e:60:a2:07:1c:15:e6:4c:7c:70:b2:b8:6c:8c:
0b:4c:5b:12:9b:2d:f3:b8:1c:36:17:85:b6:c5:b4:78:29:4c:
4d:0e:d1:96:d5:ce:dd:32:47:63:2a:6b:79:1d:89:fb:66:24:
7d:96:76:a9:a0:06:d0:c7:1f:1e:56:80:35:15:5f:00:56:f3:
4d:8f:91:09:10:2e:3e:cc:76:42:6a:34:0c:c7:81:67:41:7e:
ab:a5:98:c0:87:6b:6d:d6:27:30:ad:da:86:d8:b1:e9:66:31:
08:8c:94:d9:46:f8:cb:fa:f0:e9:2a:71:4f:17:e0:5b:a6:90:
06:0b:ec:32:38:be:17:0d:80:d9:bd:1d:86:0c:98:f0:1a:cc:
82:32:12:fc:fb:bb:c4:9f:f5:e6:80:f5:66:40:c7:49:3d:4f:
a1:53:20:0e:21:56:cf:1a:77:f0:96:6b:0f:74:10:b0:98:16:
5b:d5:33:de:eb:e5:ac:1e:cf:34:6e:1d:a1:2b:2a:aa:25:26:
b5:74:4b:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:09 2025 by rpki-client